Tabla de contenidos para April 2024 en Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com Information provided in this Magazine is strictly for educational purpose only. Please don't misuse this knowledge to hack…

Cybersecurity is crucial in the modern digital world. Among the many cyber threats, typo-squatting is a sneaky and frequently disregarded technique. This technique uses basic typographical errors as an opportunity to commit hostile acts by taking advantage of human error. This piece explores the complex realm of typo-squatting, including its processes, history, modern hacker uses, efficacy, and defense methods. What is Typosquatting? Typosquatting is a type of social engineering attack that targets internet users who incorrectly type a URL into their web browser rather than using a search engine. Typically, it involves tricking users into visiting malicious websites with URLs that are common misspellings of legitimate websites. The ‘typo’ in typosquatting refers to the small mistakes people can make when typing on a keyboard. Typosquatting is also known as URL…

Metasploit, the world's leading penetration testing framework, has long been the tool of choice for ethical hackers and security professionals. With the release of Metasploit 6.4, the developers have introduced many new features, improvements, and enhancements aimed at making the framework more powerful, user-friendly, and efficient. This article delves into the latest additions and updates in Metasploit 6.4, providing a detailed overview of its new capabilities. "Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business."-Kevin Mitnick 1.Enhanced Evasion Techniques Metasploit 6.4 has significantly improved its evasion capabilities, making it more effective at bypassing modern security defenses. The new evasion modules are designed to evade various types of detection mechanisms, including antivirus, endpoint detection and…

Smart TVs have become an integral part of our homes, offering entertainment, convenience, and connectivity. However, recent findings reveal that certain LG smart TVs are susceptible to security flaws that could compromise user privacy and control. In this article, we’ll explore the vulnerabilities, their impact, and steps users can take to protect their devices. The Vulnerabilities 1.CVE-2023-6317: Authorization Bypass This vulnerability allows an attacker to add an extra user to the TV set, bypassing the authorization mechanism. Even though the vulnerable service is intended for local area network (LAN) access only, over 91 ,000 devices expose this service to the Internet. Affected models include LG43UM7000PLA, OLED55CXPUA, OLED48C1PUB, and OLED55A23LA running specific webOS versions. 2.CVE-2023-6318: Privilege Escalation Once an attacker gains unauthorized access, this vulnerability allows them to elevate their privileges…

Tor Browser 13, the latest version of the privacy-focused web browser, introduces several significant updates and new features aimed at enhancing security, performance, and usability. TOR 1 3 represents the latest iteration of the TOR Browser, offering users the most up-to-date tools for private and anonymous web browsing. Below is an in-depth exploration of the key improvements and additions in Tor Browser 1 3. 1.Tor Network Software Update: 0.4.8.11 The Tor network software has been updated to version 0.4.8.11. This latest assured release includes: Bug Fixes: The update includes improvements to address and resolve existing bugs within the Tor software. These bug fixes contribute to improving the overall steadiness and performance of the network. By resolving bugs, users can experience smoother and more reliable connections while using the Tor network…

Threat landscape constantly evolves trying to bypass the security mechanisms protecting systems and resources of the intended target. One such tactic being increasingly used by threat actors nowadays to deliver payloads is through SVG image files. Almost all threat actors are using SVG images as delivery vectors to deliver payloads. Using SVG images to deliver malware or payloads is not a new phenomenon. It has been in use for a long time now. Exactly, one year ago, we have explained to our readers in our Hackercool Magazine how SVG files are used in HTML smuggling. However, recently apart from being used in HTML smuggling SVG images are being used directly in execution chains or infection chains. This article explains in detail, how SVG images can be used to deliver payloads.…

Util-linux, as you may know, is a crucial collection of utilities for Linux systems, providing essential functionalities. However, like any software, it is not immune to security flaws. In this article, we’ll explore common vulnerabilities, their impact, and mitigation strategies. Understanding Vulnerabilities in util-linux 1.Buffer Overflows: Buffer overflows occur when a program writes beyond the bounds of an allocated buffer. In util-linux, certain utilities that handle input data (e.g., fdisk, partx) are susceptible. Impact: Attackers can exploit these overflows to execute arbitrary code or crash the utility. Mitigation: Regular code audits, input validation, and secure coding practices. 2.Privilege Escalation: Some util-linux utilities run with elevated privileges (e.g., mount, umount). If a vulnerability exists, an attacker could escalate their privileges. Impact: Full system compromise. Mitigation: Limit permissions, use SELinux/AppArmor profiles, and…

Lynis is a powerful, open-source security tool used in cybersecurity. It is designed to audit and secure Unix-based systems, including Linux, macOS, and other Unix-like operating systems. This guide will show you the key features of Lynis, how to install it, and how to use it with clear images and easy instructions. Key Features of Lynis Security Auditing: Lynis scans your system to find potential security issues. Compliance Testing: It helps check if your system meets standards like PCI-DSS, HIPAA, and SOx. Penetration Testing: Lynis can be used to find security holes. Vulnerability Detection: It looks for known vulnerabilities and misconfigurations. System Hardening: Lynis gives suggestions to make your system more secure. Installation of Lynis Prerequisites A Unix-based operating system (Linux, macOS, etc.) Administrative (root) access Installation Steps 1.Download Lynis:…